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DETAILED ACTION 
Response to Amendment 



1 . This action is in response to the amendment received on December 1 , 2005. 
Claims 23-25 are newly added. Claims 1-15 and 18-25 are currently being considered. 



Response to Arguments 

2. Applicant's arguments filed December 1 , 2005 have been fully considered but 
they are not persuasive for the following reasons: 

Regarding claim 1 , the applicant argues that the CPA, Misra et al. (U.S. Patent 
5,757,920) and Haber et al. (U.S. Patent 5,781 ,629), does not teach "having the 
originator verify the acknowledgement key on the basis of the time stamp and the 
previously stored temporal information." This argument is not persuasive. Haber 
disclose a digital document authentication system, which uses time stamped certificates 
to authenticate the document that it is sent with (column 1 line 66 - column 2 line 4). 
The document is analogous to the session key disclosed by Misra and the time stamped 
certificate is equivalent to the ticket of Misra, as Haber notes that the document is "any 
sequence of bits" (column 1 lines 61-62). The time stamp of Haber is checked to 
validate that the given document was created by the correct party at the time noted on 
the time certificate (the universal time). If the document (session key) and the time 
stamp certificate (ticket) do not correspond, then the authentication tst fails, and it is 
known that the document (session key) is not valid. Therefore, using the time stamp on 
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the ticket, allows the client to verify the authenticity and the validity period of the session 
key, which according to Haber, satisfies the "need to establish the date and time at 
which a document was created and to prove that the document in question has not 
been modified since then" (column 1 lines 14-18). Furthermore, Misra states that the 
time stamp "helps to minimize the time period in which an eavesdropper may used a 
copied ticket and authenticator pair" (column 7 lines 45-52). Therefore, it is asserted 
that in combination, Misra and Haber, do teach "having the originator verify the 
acknowledgement key on the basis of the time stamp and the previously stored 
temporal information." 

Therefore, the rejection is maintained as given below, and applied to the newly 
added claims. 

Claim Rejections • 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 1 12: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

3. Claim 25 is rejected under 35 U.S.C. 112, first paragraph, as failing to comply 
with the enablement requirement. The claim(s) contains subject matter which was not 
described in the specification in such a way as to enable one skilled in the art to which it 
pertains, or with which it is most nearly connected, to make and/or use the invention. 
The claim contains the new limitation "adjusting the time stamp and the originator upon 
receipt of the authentication messages." The limitation of "adjusting" a time stamp or 
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the originator is not described in the specification in a way to allow one of ordinary skill 
in the art to clearly understand what entails "adjusting the time stamp and the 
originator." There is no mention of "adjusting" any element in the authentication 
process, and appropriate correction is required to clarify the claim language. For the 
purposes of examination, the "adjusting" is taken at the broadest reasonable 
interpretation. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claim 1-5,8-15, 18-21 are rejected under 35 U.S.C. 103(a) as being 

unpatentable over Misra et al. (U.S. Patent 5,757,920) in view of Haber et al. (U.S. 

Patent No. 5,781,629). 

Regarding claim 1, Misra discloses: 

Method for the authentication of data communicated from a originator to a 
destination, wherein a keyed hashing technique is used, according to which data to be 
authenticated is concatenated with a private key and then processed with a 
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cryptographic hash function, and the data are transmitted together with the digest of the 
hash function from the originator to the destination, 
characterized in that 

the data comprises temporal validity information representing the temporal validity of 
the data (Figure 2A, column 5 line 47 - column 6 line 31). 

Misra does not explicitly disclose the acknowledgement key comprising a time 
stamp and a previously stored temporal validity information. Misra discloses a logon 
certificate which contains a time stamp and temporal information which insure that the 
certificate containing the session key is valid (Figure 2A, column 7 lines 46 - 55). This 
logon certificate is used to log onto a domain. Once logged into the domain/system, the 
server verifies the authenticity of the key and sends a new session key 
(acknowledgment key) to the client along with a ticket (column 8 lines 37 - 65). Misra 
disclose that the session key and ticket (acknowledgement key) can contain 
authorization data including a data structure similar to an authenticator which includes a 
time stamp (column 7 lines 35 - 52). Misra does not explicitly mention that the client 
uses the time stamp to verify the ticket. Haber discloses a digital document 
authentication system, which uses a time stamped certificate to authenticate the 
document that it is sent with (column 1 line 66-column 2 line 4). The document is 
analogous to the session key of Misra and the time stamped certificate is equated to the 
ticket of Misra, as Haber notes that the document is "any sequence of bits" (column 1 
lines 61-62). The time stamp of Haber is checked to validate that the given document 
was created by the correct party at the time noted on the time stamp certificate. If the 
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document (session key) and the time stamp certificate (ticket) do not correlate, then the 
authentication test fails, and it is known that the document (session key) is not valid. 
Therefore, using the time stamp on the ticket, allows the client to verify the authenticity 
and the validity period of the session key, which according to Haber, satisfies the "need 
to establish the date and time at which a document was created and to prove that the 
document in question has not been modified since then" (column 1 lines 14-18). 
Furthermore, Misra states that the time stamp "helps to minimize the time period in 
which an eavesdropper may used a copied ticket and authenticator pair 1 ' (column 45 - 
52). Therefore, it would have been obvious to add a time stamp to the 
acknowledgement key received at the originator from the destination to help minimize 
the time period that an eavesdropper may use a intercepted session key and to 
establish the date and time at which the session key was created and to prove that the 
session key has not been modified by a third party. 

Regarding claim 5, Misra discloses: 

Method for the authenticated transmission of messages, comprising the following 
communication setup steps: 

generating a login key by a keyed-hashing method on the basis of random data, 
temporal validity information and a private key (column 5 line 47 - column 6 line 31); 

transmitting the login key from an originator to a destination (column 7 lines 10- 
21); and 
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verifying the authenticity and the temporal validity of the login key on the basis of 
the keyed hashing digest on the destination side (column 8 lines 45 - 65); and 
comprising the following acknowledgement steps: 

in case the verification of the authenticity and the temporal validity of the login 
key is positive, 

generating an acknowledgement key by a keyed-hashing method on the basis of 
second random data and the private key (column 8 lines 45 - 65); 

transmitting the acknowledgement key from the destination to the originator 
(Figure 4B, column 8 lines 60-65); and 

verifying the acknowledgement key by the originator, including checking the 
acknowledgment key (column 8 line 66 - column 9 line 9). 

Misra does not explicitly disclose the acknowledgement key comprising a time stamp 
and a previously stored temporal validity information. Misra discloses a logon certificate 
which contains a time stamp and temporal information which insure that the certificate 
containing the session key is valid (Figure 2A, column 46 - 55). This logon certificate is 
used to log onto a domain. Once logged into the domain/system, the server verifies the 
authenticity of the key and sends a new session key (acknowledgment key) to the client 
along with a ticket (column 8 lines 37 - 65). Misra disclose that the session key and 
ticket (acknowledgement key) can contain authorization data including a data structure 
similar to an authenticator which includes a time stamp (column 7 lines 35 - 52). Misra 
does not explicitly mention that the client uses the time stamp to verify the ticket. Haber 



Application/Control Number: 09/728,800 Page 8 

Art Unit: 2131 

discloses a digital document authentication system, which uses a time stamped 
certificate to authenticate the document that it is sent with (column 1 line 66-column 2 
line 4). The document is analogous to the session key of Misra and the time stamped 
certificate is equated to the ticket of Misra, as Haber notes that the document is "any 
sequence of bits" (column 1 lines 61-62). The time stamp of Haber is checked to 
validate that the given document was created by the correct party at the time noted on 
the time stamp certificate. If the document (session key) and the time stamp certificate 
(ticket) do not correlate, then the authentication test fails, and it is known that the 
document (session key) is not valid. Therefore, using the time stamp on the ticket, 
allows the client to verify the authenticity and the validity period of the session key, 
which according to Haber, satisfies the "need to establish the date and time at which a 
document was created and to prove that the document in question has not been 
modified since then" (column 1 lines 14-18). Furthermore, Misra states that the time 
stamp "helps to minimize the time period in which an eavesdropper may used a copied 
ticket and authenticator pair" (column 45 - 52). Therefore, it would have been obvious 
to add a time stamp to the acknowledgement key received at the originator from the 
destination to help minimize the time period that an eavesdropper may use a 
intercepted session key and to establish the date and time at which the session key was 
created and to prove that the session key has not been modified by a third party. 



Regarding claim 11, Misra discloses: 
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Distributed system for communicating authenticated data from a originator to a 
destination, designed for a keyed hashing technique according to which data to be 
authenticated is concatenated with a private key and then processed with a 
cryptographic hash function, and the data are transmitted together with the digest of the 
hash function from the originator to the destination, 
characterized in that 

the data comprises temporal validity information representing the temporal validity of the 
data (Figure 2A, column 5 line 47 - column 6 line 31). 

Misra does not explicitly disclose the acknowledgement key comprising a time stamp 
and a previously stored temporal validity information. Misra discloses a logon certificate 
which contains a time stamp and temporal information which insure that the certificate 
containing the session key is valid (Figure 2A, column 46 - 55). This logon certificate is 
used to log onto a domain. Once logged into the domain/system, the server verifies the 
authenticity of the key and sends a new session key (acknowledgment key) to the client 
along with a ticket (column 8 lines 37 - 65). Misra disclose that the session key and 
ticket (acknowledgement key) can contain authorization data including a data structure 
similar to an authenticator which includes a time stamp (column 7 lines 35 - 52). Misra 
does not explicitly mention that the client uses the time stamp to verify the ticket. Haber 
discloses a digital document authentication system, which uses a time stamped 
certificate to authenticate the document that it is sent with (column 1 line 66-column 2 
line 4). The document is analogous to the session key of Misra and the time stamped 
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certificate is equated to the ticket of Misra, as Haber notes that the document is "any 
sequence of bits" (column 1 lines 61-62). The time stamp of Haber is checked to 
validate that the given document was created by the correct party at the time noted on 
the time stamp certificate. If the document (session key) and the time stamp certificate 
(ticket) do not correlate, then the authentication test fails, and it is known that the 
document (session key) is not valid. Therefore, using the time stamp on the ticket, 
allows the client to verify the authenticity and the validity period of the session key, 
which according to Haber, satisfies the "need to establish the date and time at which a 
document was created and to prove that the document in question has not been 
modified since then" (column 1 lines 14-18). Furthermore, Misra states that the time 
stamp "helps to minimize the time period in which an eavesdropper may used a copied 
ticket and authenticator pair" (column 45 - 52). Therefore, it would have been obvious 
to add a time stamp to the acknowledgement key received at the originator from the 
destination to help minimize the time period that an eavesdropper may use a 
intercepted session key and to establish the date and time at which the session key was 
created and to prove that the session key has not been modified by a third party. 

Regarding claim 1 5, Misra discloses: 

Distributes system for the authenticated transmission of messages, comprising: 
an originator designed to generate a login key by a keyed-hashing method on the basis 
of random data, temporal validity information and a private key (column 5 line 47 - 
column 6 line 31); 
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a network for transmitting the login key from the originator to a destination (column 7 
lines 10-21), 

wherein the destination is designed to verify the authenticity and the temporal validity of 
the login key on the basis of the keyed hashing digest (column 8 lines 45 - 65). 

Misra does not explicitly disclose the acknowledgement key comprising a time stamp 
and a previously stored temporal validity information. Misra discloses a logon certificate 
which contains a time stamp and temporal information which insure that the certificate 
containing the session key is valid (Figure 2A, column 46 - 55). This logon certificate is 
used to log onto a domain. Once logged into the domain/system, the server verifies the 
authenticity of the key and sends a new session key (acknowledgment key) to the client 
along with a ticket (column 8 lines 37 - 65). Misra disclose that the session key and 
ticket (acknowledgement key) can contain authorization data including a data structure 
similar to an authenticator which includes a time stamp (column 7 lines 35 - 52). Misra 
does not explicitly mention that the client uses the time stamp to verify the ticket. Haber 
discloses a digital document authentication system, which uses a time stamped 
certificate to authenticate the document that it is sent with (column 1 line 66-column 2 
line 4). The document is analogous to the session key of Misra and the time stamped 
certificate is equated to the ticket of Misra, as Haber notes that the document is "any 
sequence of bits" (column 1 lines 61-62). The time stamp of Haber is checked to 
validate that the given document was created by the correct party at the time noted on 
the time stamp certificate. If the document (session key) and the time stamp certificate 
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(ticket) do not correlate, then the authentication test fails, and it is known that the 
document (session key) is not valid. Therefore, using the time stamp on the ticket, 
allows the client to verify the authenticity and the validity period of the session key, 
which according to Haber, satisfies the "need to establish the date and time at which a 
document was created and to prove that the document in question has not been 
modified since then" (column 1 lines 14-18). Furthermore, Misra states that the time 
stamp "helps to minimize the time period in which an eavesdropper may used a copied 
ticket and authenticator pair" (column 45 - 52). Therefore, it would have been obvious 
to add a time stamp to the acknowledgement key received at the originator from the 
destination to help minimize the time period that an eavesdropper may use a 
intercepted session key and to establish the date and time at which the session key was 
created and to prove that the session key has not been modified by a third party. 

Claim 2 is rejected as applied above in rejecting claim 1. Furthermore, Misra discloses: 

Method according to claim 1, characterized in that the temporal validity 
information can be defined by the originator (column 5 line 47-55). 

Claim 3 is rejected as applied above in rejecting claim 1. Furthermore, Misra discloses: 

Method according to anyone of the preceding claims, characterized in that the 
data comprises random data which are unique for a time span defined by the temporal 
validity information (column 5 line 47-55). 
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Claim 4 is rejected as applied above in rejecting claim 1. Furthermore, Misra discloses: 

Method according to anyone of the preceding claims, characterized in that the 
data is a login key for a communication setup (column 5 lines 47-55). 

Misra describes a session key (Figure 2A item 120), which is analogous to the login key 
delineated in above claim 4. 

Claim 8 is rejected as applied above in rejecting claim 5. Furthermore, Misra discloses: 

Method according to claim 5, furthermore comprising the following message 
transmission steps: in case the verification of the acknowledgment key is positive, 
extracting the second random data from the acknowledgment key, generating a 
message by a keyed-hashing method on the basis of the second random data, 
message data and the private key, transmitting the message from the originator to the 
destination, and, verifying the message by the destination (column 8 line 66 - column 9 
line 9). 

Claim 10 is rejected as applied above in rejecting claim 5. Furthermore, Misra 
discloses: 

A storage medium storing a software program product, characterized in that the 
software program product implements, when loaded into a computing device of a 
distributed system, a method according to claim 5 (column 5 line 47 - column 6 line 31 , 
column 7 lines 10-21, column 8 lines 45 - 65). 
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Claim 12 is rejected as applied above in rejecting claim 11. Furthermore, Misra 
discloses: 

Distributed system according to claim 1 1 , characterized in that the originator is 
designed to define the temporal validity information (column 5 line 47-55). 

Claim 13 is rejected as applied above in rejecting claim 11. Furthermore, Misra 
discloses: 

Distributed system according to claim 1 1 , characterized in that the data 
comprises random data which are unique for a time span defined by the temporal 
validity information (column 5 line 47-55). 

Claim 14 is rejected as applied above in rejecting claim 11. Furthermore, Misra 
discloses: 

Distributed system according to claim 1 1 , characterized in that the data is a login 
key for a communication setup (column 5 lines 47-55). 

Misra describes a session key (Figure 2A item 120), which is analogous to the login key 
delineated in above claim 4. 

Claim 18 is rejected as applied above in rejecting claim 15. Furthermore, Misra 
discloses: 
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Distributed system according to claim 15, characterized in that the originator is 
designed to extract the second random data from the acknowledgment key in case the 
verification of the acknowledgment key is positive, generate a message by a keyed- 
hashing method on the basis of the second random data, message data and the private 
key, and transmit the message to the destination, and the destination is designed to 
verify the message (column 8 line 66 - column 9 line 9). 

Claim 9 is rejected as applied above in rejecting claim 8. Furthermore, Misra discloses: 

Method according to claim 8, characterized in that the message furthermore 
comprises a time stamp of the message and when verifying the message it is checked 
on the basis of the time stamp and the temporal validity information whether the 
message is still valid (column 5 line 47 - column 6 line 31). 

Claim 19 is rejected as applied above in rejecting claim 18. Furthermore, Misra 
discloses: 

Distributed system according to claim 18, characterized in that the message 
furthermore comprises a time stamp and when verifying the message, the destination 
checks on the basis of the time stamp of the message and the temporal validity 
information whether the message is still valid (column 5 line 47 - column 6 line 31 ). 

Claim 20 is rejected as applied above in rejecting claim 1. Furthermore, Misra 
discloses: 
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Method according to claim 1 , characterized in that the data is a message (column 
5 lines 47 - 55). 

Claim 21 is rejected as applied above in rejecting claim 11. Furthermore, Misra 
discloses: 

Distributed system according to claim 1 1 , characterized in that the data is a 
message (column 5 lines 47 - 55). 

Claim 22 is rejected as applied above in rejecting claim 1. Furthermore, Misra 
discloses: 

Method according to claim 1 , wherein the originator verifying the 
acknowledgement key on the basis of the time stamp and the previously stored 
temporal validity information includes: 

calculating an absolute value difference between an acknowledgement universal 
time and a current time of the originator (Figure 2A, column 7 lines 46 - 55). 

Claim 23 is rejected as applied above in rejecting claim 22. Furthermore, Misra 
discloses: 

Method according to claim 22, further comprising: 
comparing the absolute value difference to the temporal validity of the 
acknowledgement key (Figure 2A, column 7 lines 46 - 55). 
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Claim 24 is rejected as applied above in rejecting claim 23. Furthermore, Misra 
discloses: 

Method according to claim 23, further comprising: 

authenticating the acknowledgement key when the result of the comparison 
indicates the absolute value difference is less than the temporal validity of the 
acknowledgement key (Figure 2A, column 7 lines 46 - 55). 

Regarding claim 25, Misra discloses: 

A method of authenticating transmission of messages, the method comprising: 
generating a login key using a keyed-hashing method based on first random 

data, temporal validity information and a private key (column 5 line 47 - column 6 line 

31); 

transmitting the login key from an originator to a destination side (column 7 lines 
10-21); 

verifying the authenticating and the temporal validity of the login key based on a 
keyed hashing digest on the destination side (column 8 lines 45 - 65); 

generating an acknowledgement key using the key-hashing method based on 
second random data and the private key (column 8 lines 45 - 65), 

transmitting the acknowledgement key from the destination side to the originator 
(Figure 4B, column 8 lines 60-65); 

verifying the acknowledgement key by the originator, including checking the 
acknowledgment key (column 8 line 66 - column 9 line 9); and 
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adjusting the time stamp and the originator upon receipt of the authentication 
messages based on a universal time field included in the messages (column 8 lines 45 
-65). 

Misra does not explicitly disclose the acknowledgement key comprising a time stamp 
and a previously stored temporal validity information. Misra discloses a logon certificate 
which contains a time stamp and temporal information which insure that the certificate 
containing the session key is valid (Figure 2A, column 46 - 55). This logon certificate is 
used to log onto a domain. Once logged into the domain/system, the server verifies the 
authenticity of the key and sends a new session key (acknowledgment key) to the client 
along with a ticket (column 8 lines 37 - 65). Misra disclose that the session key and 
ticket (acknowledgement key) can contain authorization data including a data structure 
similar to an authenticator which includes a time stamp (column 7 lines 35 - 52). Misra 
does not explicitly mention that the client uses the time stamp to verify the ticket. Haber 
discloses a digital document authentication system, which uses a time stamped 
certificate to authenticate the document that it is sent with (column 1 line 66-column 2 
line 4). The document is analogous to the session key of Misra and the time stamped 
certificate is equated to the ticket of Misra, as Haber notes that the document is "any 
sequence of bits" (column 1 lines 61-62). The time stamp of Haber is checked to 
validate that the given document was created by the correct party at the time noted on 
the time stamp certificate. If the document (session key) and the time stamp certificate 
(ticket) do not correlate, then the authentication test fails, and it is known that the 
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document (session key) is not valid. Therefore, using the time stamp on the ticket, 
allows the client to verify the authenticity and the validity period of the session key, 
which according to Haber, satisfies the "need to establish the date and time at which a 
document was created and to prove that the document in question has not been 
modified since then" (column 1 lines 14-18). Furthermore, Misra states that the time 
stamp "helps to minimize the time period in which an eavesdropper may used a copied 
ticket and authenticator pair" (column 45 - 52). Therefore, it would have been obvious 
to add a time stamp to the acknowledgement key received at the originator from the 
destination to help minimize the time period that an eavesdropper may use a 
intercepted session key and to establish the date and time at which the session key was 
created and to prove that the session key has not been modified by a third party. 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
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the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kaveh Abrishamkar whose telephone number is 571- 
272-3786. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



KA 
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